🟠 CVE-2026-87690 - High (8.8)

The Metasploit Framework post module post/apple_ios/gather/ios_image_gather is affected by a rela...

https://www.thehackerwire.com/vulnerability/CVE-2026-87690/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-96227 - High (8.8)

The Piotnet Forms WordPress plugin through 1.0.30 does not authenticate or validate a form-submis...

https://www.thehackerwire.com/vulnerability/CVE-2026-96227/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-108576 - Critical (10)

A vulnerability was found in TOZED X300 up to 6.01.3. This vulnerability affects the function pro...

https://www.thehackerwire.com/vulnerability/CVE-2026-108576/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-108714 - High (7.5)

MCP Kotlin SDK through 0.15.0 contains an uncontrolled memory allocation vulnerability that allow...

https://www.thehackerwire.com/vulnerability/CVE-2026-108714/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-66086 - Critical (9.8)

In the modem OTA stack, there is a possible stack-based buffer overflow due to improper validatio...

https://www.thehackerwire.com/vulnerability/CVE-2026-66086/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-108980 - High (8.8)

Blinko through 1.8.8 allows directory traversal, overwriting startup files as root, via installPl...

https://www.thehackerwire.com/vulnerability/CVE-2026-108980/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-108718 - High (8.1)

Rill 0.77.0 through 0.90.5 contains a missing authorization vulnerability in the admin OAuth serv...

https://www.thehackerwire.com/vulnerability/CVE-2026-108718/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-108740 - High (8.3)

GoatCounter through 2.7.0 contains a mass assignment privilege escalation vulnerability in the us...

https://www.thehackerwire.com/vulnerability/CVE-2026-108740/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-108739 - High (7.5)

OpenAgents Workspace backend through launcher-v1.0.17 contains an information disclosure vulnerab...

https://www.thehackerwire.com/vulnerability/CVE-2026-108739/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-108746 - High (8.8)

Vearch 3.5.2 through 3.5.9 contains an incorrect authorization vulnerability in Role.HasPermissio...

https://www.thehackerwire.com/vulnerability/CVE-2026-108746/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-108753 - Critical (9.4)

Agnaistic agnai through 1.0.555 contains a hard-coded credentials vulnerability in self-host.dock...

https://www.thehackerwire.com/vulnerability/CVE-2026-108753/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-108760 - High (7.6)

LlamaFarm through 0.0.34 contains an insecure default configuration that binds its unauthenticate...

https://www.thehackerwire.com/vulnerability/CVE-2026-108760/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-108758 - High (8.2)

Easy!Appointments through 1.6.0 contains an authorization bypass vulnerability in Booking::regist...

https://www.thehackerwire.com/vulnerability/CVE-2026-108758/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-108853 - High (8.1)

UnicomAI Wanwu before 0.6.3 contains an insecure direct object reference vulnerability that allow...

https://www.thehackerwire.com/vulnerability/CVE-2026-108853/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-108860 - Critical (9.1)

BotSharp through 5.2.0 contains an authentication bypass vulnerability that allows unauthenticate...

https://www.thehackerwire.com/vulnerability/CVE-2026-108860/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-108963 - High (8.8)

databasement before 1.8.2 allows remote code execution because it runs certain commands (e.g., ma...

https://www.thehackerwire.com/vulnerability/CVE-2026-108963/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-108976 - High (7.8)

GNU Emacs before 31.2 (and TRAMP through 2.8.2) allows OS command injection via a filename becaus...

https://www.thehackerwire.com/vulnerability/CVE-2026-108976/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-108859 - High (7.5)

mcp-go through 1.2.1 contains a denial of service vulnerability in StreamableHTTPServer.ServeHTTP...

https://www.thehackerwire.com/vulnerability/CVE-2026-108859/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-108865 - High (8.2)

AmoyLab Unla through 0.10.0 contains an authentication bypass vulnerability that allows unauthent...

https://www.thehackerwire.com/vulnerability/CVE-2026-108865/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-108863 - High (7.5)

Katanemo Plano through 0.4.37 contains a missing authentication vulnerability that allows unauthe...

https://www.thehackerwire.com/vulnerability/CVE-2026-108863/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack